Stripe · Stripe Privacy Policy

Data Retention for Compliance and Legal Obligations

Medium severity
Share 𝕏 Share in Share

What it is

We retain Personal Data for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Why it matters

Even if you request deletion of your data, Stripe may retain it for extended periods to comply with financial regulations, meaning your right to erasure is limited in the financial services context.

Consumer impact

Stripe collects extensive personal data β€” including device identifiers, IP addresses, browsing behavior, and inferred fraud risk scores β€” not only from direct Stripe users but also from individuals who simply complete a payment on any merchant site powered by Stripe, without ever creating a Stripe account. This data is shared with a broad ecosystem of Financial Partners, affiliates, and service providers for fraud prevention, compliance, and business improvement purposes, meaning your payment behavior may be profiled and shared across the financial system without your explicit awareness. You can exercise your rights to access, correct, delete, or restrict your data by visiting stripe.com/privacy-center or emailing privacy@stripe.com.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Submit a data deletion request at stripe.com/privacy-center, but note that Stripe may retain certain financial transaction data for regulatory compliance periods even after a deletion request is processed.

Applicable agencies

  • CFPB
    CFPB has supervisory authority over payment processors' data retention practices as they relate to consumer financial records and BSA/AML compliance.
    File a complaint →

Provision details

Document information
Document
Stripe Privacy Policy
Entity
Stripe
Document last updated
March 24, 2026
Tracking information
First tracked
March 15, 2026
Last verified
April 4, 2026
Record ID
CA-P-001881
Document ID
CA-D-00106
Evidence Provenance
Source URL
Wayback Machine
SHA-256
87ac9fcdb4b3be9c7831662daf59f5425643d84690f687c3e918ab83a226dd37
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Stripe | Document: Stripe Privacy Policy | Record: CA-P-001881
Captured: 2026-03-15 11:47:00 UTC | SHA-256: 87ac9fcdb4b3be9c…
URL: https://conductatlas.com/platform/stripe/stripe-privacy-policy/data-retention-for-compliance-and-legal-obligations/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document